Lotus Domino Session Hijacking

Hi everyone, I've been very busy lately so this is why I haven't posted for so long... By the way, I might have discovered a new vulnerability in Lotus Domino Web Access. Here's what I've found As soon as you successfully authenticate to the Lotus Notes Web Interface, you receive a session token called DomAuthSessId. I've discovered that if you steal this token from a logged user, and set it in your browser then you can impersonate the victim. Obviously Lotus Notes allow the same user to authenticate concurrently from two different IPs. The Lotus Notes version were 5 and 6. To steal the cookie you can use the commom methods, like sniffing, using XSS etc. To view and set the cookie you can use a very nice firefox extension called web developer toolbar. As a side note this article was posted on bugtraq but was refused, the answer was: "Hmm this doesn't seem out of the ordinary for a webmail application -- the trick is stealing the token in the first place" Now...I've tested the same thing on openwebmail and that didn't work, so to me It doesn't look so normal. As for stealing the cookie, we have already talked about it. Credits also go to my collegue Dave Nigro for helping me testing the vulnerability.

My first post

Hi everyone, I wanna introduce myself to you... I'm a computer enthusiastic (geek), mainly self-taught that works, at the moment, as a paid ethical hacker. English is not my native language so please bear with me if you encounter any errors. As a self-taught person I often found that the real problem is not to find computer related articles on the web, but to find quality articles. For quality I mean articles explained very clearly, but that often implies a very deep knowledge of the subject treated by writer. I think that many people write some useless posts just to show-off, copying and pasting from all around. My aim is to do the opposite, e.g. write about IT or IT Sec. related matters in a way that most of the people can understand. I also invite you to partecipate in with comments that can better the resulting post. Stay tuned more to come soon.